ALL vs Specified port

3 replies
5434 views

Hi All,

I have a 300D firewall, came across something i think is strange hopefully you lot can shed some light on it.

in a nutshell my policy looks like this

Internal > External from any source adress to destination FQDNsometing.com | schedule always | services TCP-51460 allow/accept ........ if i go to my browser and type in the URL somthing.com:51460.....nothing happens , if i run a sniffer in the external interface no packets for that port ,

as soon as i change the services to all instead or TCP-51460 it works and the sniffers sees packets (obviously) please let me know what you think is wrong ?

Shane

Dave_HallAnswer

New Member

I am guessing you may be messing up on setting up the custom port service. Make sure you are setting the source port range 0 (1) to 65535; dest port should be 51460. If I had to do this, it may be similar to the following (on 5.0.x)...

emnoc

New Member

You should really use diag debug flow and validate the policy-id trhat's being matched. I would then re-order the fwpolicy ID sequences to ensure the policy with the custom policy is being matched.

Dave_HallAnswer

New Member

I am guessing you may be messing up on setting up the custom port service. Make sure you are setting the source port range 0 (1) to 65535; dest port should be 51460. If I had to do this, it may be similar to the following (on 5.0.x)...

Setting up a custom port access.gif

shane_85Author

New Member

thank you guys this has been solved, yup I didn't have the source port extended all the way up to 65535 :) just had to set to one.

Sign up

Login with SSO

Login to the community

Login with SSO